Privacy Policy for Flower Delivery Anerley Customers

Introduction

This Privacy Policy describes how Flower Delivery Anerley collects, uses, stores, and safeguards personal information of customers placing orders in Anerley and surrounding districts. We are committed to ensuring your privacy and complying with data protection regulations, including the General Data Protection Regulation (GDPR). By placing a flower delivery order with us, you acknowledge that your information will be processed according to this policy.

Who This Policy Applies To

This policy applies to all individuals who are customers of Flower Delivery Anerley and place orders for flower delivery services within the Anerley area and nearby districts. It governs how we handle personal data you provide throughout the order and delivery process.

What Data We Collect

In order to process and fulfill your flower delivery order efficiently, we may collect the following categories of personal information:

• Contact Details: Full name, delivery address, contact number, and (where applicable) recipient's details.
• Order Information: Details of products ordered, delivery instructions, order history, and special messages.
• Payment Information: Payment method details, including transaction references. We do not store full payment card data as processing is carried out by trusted payment processors.
• Communications: Correspondence via contact forms, queries, complaints, and feedback.
• Technical Data: Your IP address, browser type, and interaction with our online ordering platform, for security and user experience purposes.

Lawful Basis for Processing Data

The lawful bases upon which we process your personal data under GDPR are as follows:

• Contractual Necessity: Data is processed to fulfill the contract of delivering your order, including processing payments and arranging delivery.
• Legal Obligation: In some instances, we are legally required to retain certain information, for example for tax and accounting purposes.
• Legitimate Interests: We may use data for our legitimate business interests, such as improving our services, confirming delivery, or addressing customer service issues, provided these do not override your rights and interests.
• Consent: In specific cases, such as marketing communications, we seek your explicit consent.

How We Use Your Data

Your information is used in the following ways:

• To process orders and arrange deliveries.
• To communicate with you about your order or provide customer service.
• To process payments securely through our payment service providers.
• To meet legal, regulatory, and compliance obligations.
• To analyze and improve our services for better customer experiences.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Typically, order and transaction data are stored for up to seven years in alignment with accounting requirements. After this period, your personal data is securely erased or anonymized. If you withdraw consent for optional processing (such as marketing), your information for that purpose will be deleted or blocked without affecting the data kept for contractual or legal requirements.

Processors and Data Sharing

We work with selected third-party service providers (processors) to help deliver our services. Typical categories of processors include:

• Payment service providers for secure processing and authorization of transactions.
• IT hosting providers who deliver the technical infrastructure for our website and order system.
• Delivery couriers or partner florists where necessary to fulfill orders to extended areas.
• Bookkeeping and accounting service providers, where legally required.

All processors are contractually bound to safeguard your data and process it strictly according to our instructions and applicable data protection law. Data is not sold or shared outside these arrangements except as required by law or for legitimate legal claims.

Your Data Protection Rights

As a customer, you have the following rights under GDPR:

• Right to Access: You may request a copy of the personal data held about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete information.
• Right to Erasure: You may request deletion of your data, where legally permissible.
• Right to Restrict Processing: You can request that we limit the way we use your data.
• Right to Object: You have the right to object to processing based on legitimate interests or direct marketing.
• Right to Data Portability: Where applicable, you can request your data be provided to you or another controller in a structured, commonly used format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise your rights, contact our team using the details provided on our website or at the shop. We may need to verify your identity for certain requests, and will respond within one month as required by law.

Data Security

Protecting your data is of utmost importance to us. We implement appropriate technical and organizational measures to safeguard your personal information from unauthorized access, loss, or misuse. This includes encryption, secure data storage, access controls, and staff training on data protection principles.

International Data Transfers

Your data is primarily processed within the UK or European Economic Area. If it should become necessary to transfer your data internationally, it will only be done with appropriate safeguards, such as contractual clauses or certification schemes, to ensure your rights and protections travel with your information.

Policy Updates

This Privacy Policy may be updated from time to time to reflect legal changes or improvements in our processes. The latest version is always available on our website. Material changes will be notified clearly to customers where required.

Contact and Complaints

If you have concerns about how your data is handled or wish to make a complaint, please contact us directly using the details available on our website or at our shop. If you are not satisfied with our response, under GDPR, you also have the right to lodge a complaint with the UK Information Commissioner's Office or your local supervisory authority.